Data protection policy

1.1. Introduction

Thank you for visiting our website. We take data protection very seriously and make every effort to protect your personal data as part of our web offering.

We understand personal data to be all data concerning a natural person’s personal and factual relationships. Personal data that are collected on our website are exclusively used for our own purposes.

1.2. Legal basis for data processing

Declaration of consent: If your consent was obtained for personal data collected for processing, Article 6 Paragraph 1 lit. a of the EU General Data Protection Regulation (GDPR) is the legal basis for data processing.

Contract: When processing personal data to fulfil a contract to which you are a contractual party, Article 6 Paragraph 1 lit. b GDPR is the legal basis. This also applies to processing that is required to implement measures in advance of a contract.

Statutory obligation: If personal data is processed to fulfil a legal obligation to which our company is subject, Article 6 Paragraph 1 lit. c GDPR is the legal basis.

In the event that your existential interests - or those of another natural person - make the processing of personal data necessary, the legal basis is Article 6 Paragraph 1 lit. d GDPR.

Justified interest: If the processing is required to maintain a justified interest of our company or a third party and the interests, basic rights, and freedoms of the affected person do not outweigh the interest stated first, Article 6 Paragraph 1 lit. f GDPR is the legal basis for the processing. The justified interest of our company is in implementing our business activity.

We process your data for the following company interests:

· Optimization of the website for a better user experience

· Measurement of goals of our sales campaigns

· Communication to carry out our business activities

1.3. Rights of those affected

Your personal data is processed by us as part of our data processing. You have the rights from the Third Chapter of the GDPR with regard to our company.

We comply with the rights to information, correction, restriction of processing, deletion, or the ability to transfer your personal data. You can asset these rights as follows:

Right to information

You have the right to request a confirmation from us on whether we process your personal data. If this is the case, you have the right to receive information on this personal data and the following information:

a) the processing purposes;

b) the categories of personal data that were processed;

c) the recipients or categories of recipients to whom the personal data was published or will be published, in particular for recipients in third countries or international organizations;

d) if possible the planned duration for which the personal data is stored, or, if this is not possible, the criteria for setting this term;

e) the existence of a right to correction or deletion of your personal data or a right to restrict the processing by the responsible person or a right to object to this processing;

f) the existence of a complaint right to a supervisory authority;

g) if the personal data are not collected from the affected person, all information available on the origin of the data;

h) the existence of automated decision-making including profiling under Art. 22 Para. 1 and 4 GDPR and - at least in these cases - meaningful information on the logic involved, extent, and the desired effects of such processing for the affected person.

If personal data is transferred to a third country or international organization, you have the right to be informed about suitable guarantees under Article 46 GDPR in relation to the transfer.

We provide a copy of the personal data that are subject to the processing. For all further copies that you request, we may require an appropriate fee based on the administrative costs. If you make a request for information electronically, and if you have not stated anything further, we have to provide the information in a common electronic format.

The right to receive a copy may not adversely affect the rights and freedoms of other people.

Right to correction

You also have the right to request the correction without delay of incorrect personal data relating to you. Whilst taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - even using an additional declaration.

Right to deletion (“right to be forgotten”)

You also have the right to request that we delete your personal data without delay and we are obligated to delete the data without delay if one of the following reasons applies:

a) Your affected personal data are no longer required for the purposes for which they were collected or any other processing.

b) You revoke your consent on which the processing is based as per Art. 6 I lit. a or Art. 9 Para. 2 lit. a GDPR and there is no other legal basis for the processing.

c) You object to the processing under Art. 21 Para. 1 GDPR and there are no other priority justified reasons for the processing or you object to the processing under Art. 21 Para. 2 GDPR.

d) Your personal data was processed illegally.

e) The deletion of your personal data is required to fulfil a legal obligation under Union law or the law of the member state to which we are subject.

f) Your personal data were collected for information company services offered under Art. 8 Para. 1 GDPR.

(2) If we have published your personal data and are obliged to delete it under Art. 1, whilst taking into account the available technology and implementation costs, we must undertake appropriate measures, including of a technical nature, to inform the person responsible for data protection who is processing the personal data that you have requested the deletion of all links to this personal data or copies or replications of this personal data. This does not apply if the processing is required a) to execute the right to freedom of expression and information; b) to fulfil a legal obligation that requires processing under the law of the Union or member states to which we are subject or to undertake a task that is in the public interest or to execute public authority that was transferred to us; c) for reasons of public interest relating to public health under Article 9 Paragraph 2 Letters h and i and Article 9 Paragraph 3; d) for archive purposes in the public interest, academic or historic research purposes, or for statistical purposes under Article 89 Paragraph 1 if the right stated in Paragraph 1 is expected to make the implementation of the objectives of this processing impossible or seriously adversely affect them, or e) to assert, exercise, or defend legal claims.

Right to restriction on processing

(1) The affected person has the right to request the restriction of processing from the person responsible if the following requirements are met:

a) the correctness of the personal data is disputed by the affected person for the duration it takes the person responsible to check the correctness of the personal data

b) the processing is illegal and the affected person rejects the deletion of the personal data and instead requests a restriction on the use of the personal data;

c) the responsible person no longer requires the personal data for the processing purposes but the affected person does require them to assert, exercise, or defend legal claims, or

d) if you have submitted an objection against the processing under Article. 21 Paragraph. 1 GDPR and it is not yet clear whether the justified reasons of the responsible person outweigh your reasons.

(2) If the processing was restricted, this personal data - apart from its storage - can only be processed with the consent of the affected person or to assert, exercise, or defend legal claims or to protect the rights of another natural person or legal entity, or due to the important public interest of the Union or a member state. 4.5.2016 L 119/44 Official Journal of the European Communities DE

(3) An affected person that has brought about a restriction on processing is informed by the person responsible before the restriction is lifted.

Article 19 Notification obligation relating to the correction or deletion of personal data or restricting its processing
The person responsible informs all recipients whose personal data was published of all corrections to or deletions of the personal data or a restriction on the processing under Article 16, Article 17 Paragraph 1, and Article 18 unless this proves to be impossible or is associated with disproportionate costs. The person responsible informs the affected person about these recipients if the affected person requests this.

Article 20 Right to data transfer

(1) The affected person has the right to receive their personal data that they provided to a responsible person in a structured, common, machine-readable format and they have the right to transfer these data to another responsible person without hindrance by the person responsible to whom the person data was provided, if

a) the processing is based on consent under Article 6 Paragraph 1 Letter a or Article 9 Paragraph 2 Letter a or a contract based on Article 6 Paragraph 1 Letter b and

b) the processing takes place using automated processes. (2) In executing your right to transfer data under Paragraph 1, the affected person also has the right to ensure that your personal data is transferred directly from one responsible person to another if this is technically feasible.

(3) The utilization of the right in Paragraph 1 of the Article stated above does not affect Article 17. This right does not apply to processing personal data that are required to undertake a task that is in the public interest or to exercise public authority that has been transferred to the person responsible.

(4) The right under Paragraph 2 may not adversely affect the rights and freedoms of other people.

You also have the right to call on our data protection officer for advice on the stated rights and all questions related to the processing of your personal data.

In addition, our customers can also assert their complaint right to the responsible supervisory authority.

Right to objection

You have the right for reasons arising from your special situation to object to the processing of your personal data at any time as a result of Art. 6 Para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. The responsible person no longer processes your personal data unless they can demonstrate binding reasons requiring protection for the processing that outweigh your interests, rights, and freedoms or the processing is used to assert, exercise or defend legal claims.

2) If your personal data is processed for direct advertising purposes, you have the right to object to the processing of your personal data for such advertising purposes at any time; this also applies to profiling if it is in connection with direct advertising.

3) If you object to the processing for the purposes of direct advertising, your personal data is no longer processed for these purposes.

4) You have the opportunity to exercise your objection right in relation to the use of the services of the information company - notwithstanding Directive 2002/58/EU - when technical specifications are used for automated processes.

5) You have the right for reasons arising from your specific situation to object to the processing of your personal data for academic, historic research, or statistical purposes under Art. 89 Para. 1 unless the processing is required in the public interest.

Notwithstanding any other administrative law or legal assistance, you have the right to complain to a supervisory authority if you are of the opinion that the processing of your personal data infringes the GDPR.

1.4. Web server logs

6.1. Text

When using our website the connection information is stored in the server log files.

This information includes:

• IP address of the system used to call up

• Browser information such as operating system used and screen resolution

• Website called up

• Originating website

• Time of call up

The web server logs are only processed for security purposes.

We use the logged data only for statistical analyses for the purposes of operating, securing, and optimizing the offering. However, we reserve the right to check the logged data subsequently if there are specific concerns leading to a justified suspicion of illegal use.

1.5. Contact form

Within the scope of the contact form, you have the option to send us any data. The data is passed on from our web server by email to the email inbox of our company.

1.6. Cookies

This website uses cookies. Cookies are text files that are stored on your device. Cookies can be read, transferred or modified by the website when calling up the website. We only use cookies with random, pseudonym identification numbers. These identification numbers are used to analyze your usage behavior on our website. At no time is the usage profile assigned to the name of a natural person. If you use special functions (e.g. shopping basket or “stay logged in”) on our website, cookies are also used for these functions.

It is possible at any time to object to the setting of cookies by making the relevant change in the browser's settings. Set cookies can be deleted. It is emphasized that when deactivating cookies not all of the functions of our website may be fully available.

The precise functions of the cookies can be viewed from the more detailed information in this data protection policy.

1.7. Google Analytics

This website uses Google Analytics, a web analysis service by Google Inc. (Google). Google Analytics uses so-called “cookies”, text files that are saved on your computer and enable the use of the website to be analyzed. The information created by the cookie on your use of this website is transferred to and stored on a Google server in the US. However, if IP anonymization has been activated on this website, Google will first shorten your IP address within European Union Member States or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google uses this information to analyze your use of the website, create reports on the website activities, and provide other services associated with the website and internet use for the website operator. The IP address provided using Google Analytics is not combined with other Google data. You can prevent the installation of cookies by adjusting the relevant setting in your browser software; but in this case we expressly point out that you may not be able to use the full functions of this website. You can also prevent the recording of the data created by the cookie related to your use of the website (incl. your IP address) by Google and the processing of this data by Google by downloading and installing a browser plug-in available from the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

We have concluded a processing contract with Google Germany GmbH - GOOGLE ANALYTICS DEUTSCHLAND that ensures that the personal data is only processed according to our instructions and generally in Europe. IP anonymization (IP masking method) is activated on our website, whereby the IP address is made anonymous automatically.

You can find more information on Google Analytics and data protection on the website https://www.google.com/intl/de/analytics/privacyoverview.html.

1.8. Data protection contact

The responsible entity for data processing as defined by Art. 4 GDPR is

anynines GmbH

Science Park 2

66123 Saarbrücken

Germany

Phone: +49 (0)681 - 309 64 190

Fax: +49 (0)681 - 309 64 191

Email: mail@anynines.com

Statutory representative

Dipl.-Inf.(FH) Julian Fischer

Science Park 2

66123 Saarbrücken

Germany

Phone: +49 (0)681 - 30964190

Fax: +49 (0)681 - 309 64 191

Mail: mail@anynines.com

Data protection manager

Sicoda GmbH

Oliver Gönner

Rochusstraße 198

53123 Bonn

Germany

Phone: +49 (0)228 - 28614060

Mail: datasecurity@anynines.com